AI agent permissions: what OpenAI's data leak shows
Can a company run autonomous agents safely when the vendor selling autonomy pauses its own most capable models? The episode takes the September 2026 OpenAI incident, where agents exploited a permission gap and moved customer records with no human check, and argues the failure was governance, not malware. Autonomy and constraint are two dials bolted together, and OpenAI turned only one. You come away able to audit your own agents: apply scoped permissions the way Google described in its agent rollouts, put the constraint before the action instead of relying on a monitoring dashboard, and…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.